Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	@types/lru-cache
npm	popper.js

Note

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (61)

Datasource	Name	Last Updated
github-actions	bufbuild/buf-breaking-action	2024-02-22
github-actions	bufbuild/buf-lint-action	2024-02-22
github-actions	bufbuild/buf-push-action	2023-10-02
gomod	github.com/Azure/azure-sdk-for-go	2023-01-19
gomod	github.com/Azure/go-autorest/autorest/adal	2024-05-30
gomod	github.com/alecthomas/kingpin/v2	2023-09-30
gomod	github.com/alecthomas/units	2024-09-27
gomod	github.com/apache/arrow/go/v10	2024-07-11
gomod	github.com/apache/arrow/go/v8	2024-07-11
gomod	github.com/cespare/xxhash/v2	2024-04-04
gomod	github.com/dennwc/varint	2019-06-16
gomod	github.com/docker/distribution	2023-10-02
gomod	github.com/edsrzf/mmap-go	2024-10-09
gomod	github.com/go-kit/log	2022-04-27
gomod	github.com/go-zookeeper/zk	2024-07-24
gomod	github.com/gogo/protobuf	2021-01-10
gomod	github.com/golang/snappy	2023-12-25
gomod	github.com/json-iterator/go	2021-09-11
gomod	github.com/kolo/xmlrpc	2022-09-21
gomod	github.com/mwitkow/go-conntrack	2019-07-16
gomod	github.com/oklog/ulid	2024-04-13
gomod	github.com/pkg/errors	2020-01-14
gomod	github.com/prometheus/common/assets	2022-06-17
gomod	github.com/prometheus/common/sigv4	2021-06-23
gomod	github.com/shurcooL/httpfs	2023-07-04
gomod	github.com/simonpasquier/klog-gokit	2024-08-19
gomod	github.com/simonpasquier/klog-gokit/v3	2024-08-19
gomod	github.com/sirupsen/logrus	2023-05-21
gomod	go.uber.org/atomic	2023-05-03
gomod	go.uber.org/automaxprocs	2024-09-23
gomod	go.uber.org/goleak	2023-10-24
gomod	gopkg.in/alecthomas/kingpin.v2	2023-09-30
gomod	gopkg.in/yaml.v2	2022-05-27
gomod	gopkg.in/yaml.v3	2022-05-27
gomod	k8s.io/klog	2024-06-20
gomod	k8s.io/klog/v2	2024-06-20
npm	@forevolve/bootstrap-dark	2024-03-24
npm	@nexucis/fuzzy	2024-07-16
npm	@nexucis/kvsearch	2024-07-16
npm	@testing-library/react-hooks	2022-06-18
npm	@wojtekmaj/enzyme-adapter-react-17	2022-11-09
npm	css.escape	2016-08-23
npm	enzyme	2019-12-20
npm	enzyme-to-json	2021-04-08
npm	fsevents	2023-08-21
npm	isomorphic-fetch	2020-09-23
npm	jest-canvas-mock	2023-06-28
npm	jest-fetch-mock	2020-03-10
npm	jquery.flot.tooltip	2017-04-20
npm	moment	2023-12-27
npm	mutationobserver-shim	2020-06-09
npm	react-copy-to-clipboard	2022-04-13
npm	tempusdominus-bootstrap-4	2022-04-12
npm	tempusdominus-core	2022-04-12

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release.
Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): pin dependencies (@lezer/common, @lezer/generator, @lezer/highlight, @lezer/lr, @testing-library/react-hooks, @types/enzyme, @types/jest, @types/jquery, @types/lru-cache, @types/node, @types/react-copy-to-clipboard, @types/react-router-dom, @types/sanitize-html, @types/sinon, @wojtekmaj/enzyme-adapter-react-17, actions/cache, actions/checkout, actions/setup-go, actions/setup-node, actions/upload-artifact, bufbuild/buf-setup-action, busybox, dessant/lock-threads, enzyme, enzyme-to-json, eslint-config-prettier, eslint-config-react-app, eslint-plugin-prettier, github.com/grafana/grafonnet-lib/grafonnet, github.com/grafana/jsonnet-libs/grafana-builder, github/codeql-action, gitpod/workspace-full, golangci/golangci-lint-action, isomorphic-fetch, jest-canvas-mock, jest-fetch-mock, mutationobserver-shim, nock, prettier, prometheus/promci, prominfra/funcbench, prominfra/prombench, quay.io/prometheus/busybox-linux-amd64, quay.io/prometheus/golang-builder, react-scripts, sinon, ts-jest, typescript)
• chore(deps): pin dependencies (@codemirror/autocomplete, @codemirror/language, @codemirror/lint, @codemirror/state, @codemirror/view)
• chore(deps): pin dependencies (@types/react, @types/react-dom)
• fix(deps): update github.com/alecthomas/units digest to 0f3dac3
• fix(deps): update github.com/google/pprof digest to b05bdac
• fix(deps): update github.com/grafana/regexp digest to f7b3be9
• fix(deps): update github.com/polarsignals/frostdb digest to 906ebba
• fix(deps): update github.com/shurcool/httpfs digest to f1e31cf
• fix(deps): update github.com/thanos-io/objstore digest to 4e5fd42
• fix(deps): update golang.org/x/exp digest to 944ab1f
• chore(deps): update dependency @types/flot to v0.0.36
• fix(deps): update module github.com/azure/go-autorest/autorest to v0.11.30
• fix(deps): update module github.com/azure/go-autorest/autorest/adal to v0.9.24
• fix(deps): update module github.com/go-logfmt/logfmt to v0.6.1
• fix(deps): update module github.com/go-zookeeper/zk to v1.0.4
• fix(deps): update module github.com/miekg/dns to v1.1.69
• fix(deps): update module github.com/scaleway/scaleway-sdk-go to v1.0.0-beta.36
• chore(deps): update actions/cache action to v3.5.0
• chore(deps): update bufbuild/buf-setup-action action to v1.50.0
• chore(deps): update golangci/golangci-lint-action action to v3.7.1
• chore(deps): update module github.com/simonpasquier/klog-gokit/v3 to v3.5.0
• chore(deps): update node.js to v16.20.2
• chore(deps): update prometheus/promci action to v0.5.3
• fix(deps): update dependency @nexucis/fuzzy to ^0.5.0
• fix(deps): update dependency @nexucis/kvsearch to ^0.9.0
• fix(deps): update dependency moment-timezone to ^0.6.0
• fix(deps): update dependency sass to v1.97.1
• fix(deps): update font awesome (@fortawesome/fontawesome-svg-core, @fortawesome/free-solid-svg-icons, @fortawesome/react-fontawesome)
• fix(deps): update kubernetes packages to v0.35.0 (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go)
• fix(deps): update module github.com/alecthomas/kingpin/v2 to v2.4.0
• fix(deps): update module github.com/aws/aws-sdk-go to v1.55.8
• fix(deps): update module github.com/cespare/xxhash/v2 to v2.3.0
• fix(deps): update module github.com/digitalocean/godo to v1.171.0
• fix(deps): update module github.com/edsrzf/mmap-go to v1.2.0
• fix(deps): update module github.com/envoyproxy/go-control-plane to v0.14.0
• fix(deps): update module github.com/envoyproxy/protoc-gen-validate to v0.10.1
• fix(deps): update module github.com/fsnotify/fsnotify to v1.9.0
• fix(deps): update module github.com/go-openapi/strfmt to v0.25.0
• fix(deps): update module github.com/gophercloud/gophercloud to v1.14.1
• fix(deps): update module github.com/hashicorp/consul/api to v1.33.0
• fix(deps): update module github.com/hetznercloud/hcloud-go to v1.59.2
• fix(deps): update module github.com/influxdata/influxdb to v1.12.2
• fix(deps): update module github.com/ionos-cloud/sdk-go/v6 to v6.3.5
• fix(deps): update module github.com/linode/linodego to v1.63.0
• fix(deps): update module github.com/oklog/run to v1.2.0
• fix(deps): update module github.com/ovh/go-ovh to v1.9.0
• fix(deps): update module github.com/prometheus/client_golang to v1.23.2
• fix(deps): update module github.com/prometheus/client_model to v0.6.2
• fix(deps): update module github.com/prometheus/common to v0.67.4
• fix(deps): update module github.com/prometheus/exporter-toolkit to v0.15.0
• fix(deps): update module github.com/prometheus/prometheus to v0.308.1
• fix(deps): update module github.com/stretchr/testify to v1.11.1
• fix(deps): update module go.uber.org/atomic to v1.11.0
• fix(deps): update module go.uber.org/automaxprocs to v1.6.0
• fix(deps): update module go.uber.org/goleak to v1.3.0
• fix(deps): update module golang.org/x/sync to v0.19.0
• fix(deps): update module golang.org/x/sys to v0.39.0
• fix(deps): update module golang.org/x/time to v0.14.0
• fix(deps): update module golang.org/x/tools to v0.40.0
• fix(deps): update module google.golang.org/api to v0.258.0
• fix(deps): update module gopkg.in/alecthomas/kingpin.v2 to v2.4.0
• fix(deps): update module k8s.io/klog/v2 to v2.130.1
• fix(deps): update opentelemetry-go monorepo to v1.39.0 (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/trace)
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-go action to v6
• chore(deps): update actions/setup-node action to v6
• chore(deps): update actions/upload-artifact action to v6
• chore(deps): update dependency @testing-library/react-hooks to v8
• chore(deps): update dependency @types/jest to v30
• chore(deps): update dependency @types/lru-cache to v7
• chore(deps): update dependency eslint-config-prettier to v10
• chore(deps): update dependency eslint-plugin-prettier to v5
• chore(deps): update dependency nock to v14
• chore(deps): update dependency prettier to v3
• chore(deps): update dependency sinon to v21 (sinon, @types/sinon)
• chore(deps): update dependency typescript to v5
• chore(deps): update dessant/lock-threads action to v6
• chore(deps): update github/codeql-action action to v4
• chore(deps): update golangci/golangci-lint-action action to v9
• chore(deps): update module github.com/simonpasquier/klog-gokit to v3
• chore(deps): update node.js to v24 (node, @types/node)
• fix(deps): update dependency @forevolve/bootstrap-dark to v4
• fix(deps): update dependency bootstrap to v5
• fix(deps): update dependency downshift to v9
• fix(deps): update dependency http-proxy-middleware to v3
• fix(deps): update dependency lru-cache to v11
• fix(deps): update dependency react-resize-detector to v12
• fix(deps): update dependency react-router-dom to v7
• fix(deps): update dependency reactstrap to v9
• fix(deps): update font awesome (major) (@fortawesome/fontawesome-svg-core, @fortawesome/free-solid-svg-icons, @fortawesome/react-fontawesome)
• fix(deps): update module github.com/apache/arrow/go/v10 to v17
• fix(deps): update module github.com/azure/azure-sdk-for-go to v68
• fix(deps): update module github.com/envoyproxy/protoc-gen-validate to v1
• fix(deps): update module github.com/golang/snappy to v1
• fix(deps): update module github.com/gophercloud/gophercloud to v2
• fix(deps): update module github.com/grpc-ecosystem/grpc-gateway to v2
• fix(deps): update module github.com/hetznercloud/hcloud-go to v2
• fix(deps): update module github.com/influxdata/influxdb to v2
• fix(deps): update module github.com/oklog/ulid to v2
• fix(deps): update module github.com/vultr/govultr/v2 to v3
• fix(deps): update module gopkg.in/yaml.v2 to v3
• fix(deps): update module k8s.io/klog to v2
• fix(deps): update react monorepo to v19 (major) (@types/react, @types/react-dom, react, react-dom, react-test-renderer)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update github.com/hashicorp/nomad/api digest to 1355d4c
• fix(deps): update google.golang.org/genproto digest to 0a764e5
• chore(deps): update quay.io/prometheus/golang-builder docker tag to v1.25

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (go package github.com/apache/arrow/go/v8).

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update module github.com/docker/distribution to v2.8.2+incompatible [security]
• chore(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.7 [security]
• chore(deps): update module github.com/sirupsen/logrus to v1.9.1 [security]
• chore(deps): update module golang.org/x/text to v0.3.8 [security]
• fix(deps): update module github.com/prometheus/alertmanager to v0.25.1 [security]
• chore(deps): update module github.com/golang-jwt/jwt/v4 to v4.5.2 [security]
• chore(deps): update module github.com/golang/glog to v1.2.4 [security]
• chore(deps): update module golang.org/x/crypto to v0.45.0 [security]
• fix(deps): update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.44.0 [security]
• fix(deps): update module golang.org/x/net to v0.38.0 [security]
• fix(deps): update module golang.org/x/oauth2 to v0.27.0 [security]
• fix(deps): update module google.golang.org/grpc to v1.56.3 [security]
• fix(deps): update module google.golang.org/protobuf to v1.33.0 [security]
• fix(deps): update module github.com/docker/docker to v25 [security]
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

86/93 CVEs have Renovate fixes.

gomod

documentation/examples/remote_storage/go.mod

github.com/aws/aws-sdk-go

• GO-2022-0646
• GO-2022-0635

github.com/docker/distribution

• GHSA-hqxw-f8mx-cpmw (fixed in >= 2.8.2-beta.1)

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

• GHSA-rcjv-mgp8-qvmr (fixed in >= 0.44.0)
• GO-2023-2113 (fixed in >= 0.44.0)

golang.org/x/net

• GHSA-69cg-p879-7622 (fixed in >= 0.0.0-20220906165146-f3363e06e74c)
• GO-2025-3503 (fixed in >= 0.36.0)
• GO-2022-1144 (fixed in >= 0.4.0)
• GO-2023-1571 (fixed in >= 0.7.0)
• GHSA-vvgc-356p-c3xw (fixed in >= 0.38.0)
• GO-2022-0969 (fixed in >= 0.0.0-20220906165146-f3363e06e74c)
• GHSA-qppj-fm5r-hxr3 (fixed in >= 0.17.0)
• GO-2023-2102 (fixed in >= 0.17.0)
• GO-2024-3333 (fixed in >= 0.33.0)
• GHSA-4374-p667-p6c8 (fixed in >= 0.17.0)
• GO-2025-3595 (fixed in >= 0.38.0)
• GHSA-qxp5-gwg8-xv66 (fixed in >= 0.36.0)
• GHSA-vvpx-j8f3-3w6h (fixed in >= 0.7.0)
• GHSA-xrjj-mj9h-534m (fixed in >= 0.4.0)
• GHSA-fxg5-wq6x-vr4w (fixed in >= 0.1.1-0.20221104162952-702349b0e862)
• GO-2023-1988 (fixed in >= 0.13.0)
• GHSA-2wrh-6pvc-2jm9 (fixed in >= 0.13.0)
• GO-2024-2687 (fixed in >= 0.23.0)
• GO-2023-1495 (fixed in >= 0.1.1-0.20221104162952-702349b0e862)
• GHSA-4v7x-pqxf-cx7m (fixed in >= 0.23.0)

golang.org/x/text

• GHSA-69ch-w2m2-3vjp (fixed in >= 0.3.8)
• GO-2022-1059 (fixed in >= 0.3.8)

google.golang.org/protobuf

• GO-2024-2611 (fixed in >= 1.33.0)
• GHSA-8r3f-844c-mc37 (fixed in >= 1.33.0)

golang.org/x/oauth2

• GO-2025-3488 (fixed in >= 0.27.0)
• GHSA-6v2p-p543-phr9 (fixed in >= 0.27.0)

go.mod

github.com/aws/aws-sdk-go

• GO-2022-0646
• GO-2022-0635

github.com/docker/docker

• GO-2023-1701 (fixed in >= 20.10.24+incompatible)
• GHSA-qrqr-3x5j-2xw9
• GHSA-6wrf-mxfj-pf5p (fixed in >= 20.10.24)
• GO-2024-3005 (fixed in >= 25.0.6+incompatible)
• GO-2024-2512 (fixed in >= 24.0.9+incompatible)
• GHSA-4vq8-7jfc-9cvp (fixed in > 25.0.12)
• GHSA-232p-vwff-86mp (fixed in >= 20.10.24)
• GO-2025-3829 (fixed in >= 25.0.13+incompatible)
• GHSA-33pg-m6jh-5237 (fixed in >= 20.10.24)
• GHSA-mq39-4gv4-mvpx (fixed in >= 23.0.11)
• GHSA-6hwg-w5jg-9c6x
• GO-2023-1699 (fixed in >= 20.10.24+incompatible)
• GHSA-jq35-85cj-fj4p (fixed in >= 20.10.27)
• GO-2023-1700 (fixed in >= 20.10.24+incompatible)
• GHSA-j249-ghv5-7mxv
• GHSA-xw73-rw38-6vjc (fixed in >= 24.0.9)

github.com/prometheus/alertmanager

• GHSA-v86x-5fm3-5p7j (fixed in >= 0.25.1)
• GO-2023-2020 (fixed in >= 0.25.1)

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

• GHSA-rcjv-mgp8-qvmr (fixed in >= 0.44.0)
• GO-2023-2113 (fixed in >= 0.44.0)

golang.org/x/net

• GO-2025-3503 (fixed in >= 0.36.0)
• GHSA-vvgc-356p-c3xw (fixed in >= 0.38.0)
• GHSA-qppj-fm5r-hxr3 (fixed in >= 0.17.0)
• GO-2023-2102 (fixed in >= 0.17.0)
• GO-2024-3333 (fixed in >= 0.33.0)
• GHSA-4374-p667-p6c8 (fixed in >= 0.17.0)
• GO-2025-3595 (fixed in >= 0.38.0)
• GHSA-qxp5-gwg8-xv66 (fixed in >= 0.36.0)
• GO-2023-1988 (fixed in >= 0.13.0)
• GHSA-2wrh-6pvc-2jm9 (fixed in >= 0.13.0)
• GO-2024-2687 (fixed in >= 0.23.0)
• GHSA-4v7x-pqxf-cx7m (fixed in >= 0.23.0)

golang.org/x/oauth2

• GO-2025-3488 (fixed in >= 0.27.0)
• GHSA-6v2p-p543-phr9 (fixed in >= 0.27.0)

google.golang.org/grpc

• GO-2023-2153 (fixed in >= 1.56.3)
• GHSA-m425-mq94-257g (fixed in >= 1.56.3)

google.golang.org/protobuf

• GO-2024-2611 (fixed in >= 1.33.0)
• GHSA-8r3f-844c-mc37 (fixed in >= 1.33.0)

github.com/docker/distribution

• GHSA-hqxw-f8mx-cpmw (fixed in >= 2.8.2-beta.1)

github.com/golang-jwt/jwt/v4

• GO-2024-3250 (fixed in >= 4.5.1)
• GHSA-29wx-vh33-7x7r (fixed in >= 4.5.1)
• GHSA-mh63-6h87-95cp (fixed in >= 4.5.2)
• GO-2025-3553 (fixed in >= 4.5.2)

github.com/golang/glog

• GO-2025-3372 (fixed in >= 1.2.4)
• GHSA-6wxm-mpqj-6jpf (fixed in >= 1.2.4)

github.com/hashicorp/go-retryablehttp

• GHSA-v6v8-xj6m-xwqh (fixed in >= 0.7.7)
• GO-2024-2947 (fixed in >= 0.7.7)

github.com/sirupsen/logrus

• GO-2025-4188 (fixed in >= 1.9.1)
• GHSA-4f99-4q7p-p3gh (fixed in >= 1.9.1)

golang.org/x/crypto

• GO-2023-2402 (fixed in >= 0.17.0)
• GHSA-f6x5-jh6r-wrfv (fixed in >= 0.45.0)
• GHSA-45x7-px36-x8w8 (fixed in >= 0.17.0)
• GO-2025-3487 (fixed in >= 0.35.0)
• GHSA-j5w8-q4qc-rx2x (fixed in >= 0.45.0)
• GO-2025-4116 (fixed in >= 0.43.0)
• GHSA-hcg3-q754-cr77 (fixed in >= 0.35.0)
• GHSA-v778-237x-gjrc (fixed in >= 0.31.0)
• GO-2025-4134 (fixed in >= 0.45.0)
• GO-2025-4135 (fixed in >= 0.45.0)
• GO-2024-3321 (fixed in >= 0.31.0)

Detected Dependencies

circleci (1)

.circleci/config.yml (1)

• busybox unknown version → [Updates: undefined]

dockerfile (2)

.gitpod.Dockerfile (1)

• gitpod/workspace-full unknown version → [Updates: undefined]

Dockerfile (1)

• quay.io/prometheus/busybox-linux-amd64 latest → [Updates: latest]

github-actions (9)

.github/workflows/buf-lint.yml (4)

• actions/checkout v3 → [Updates: v6, v3]
• bufbuild/buf-setup-action v1.13.1 → [Updates: v1.50.0, v1.13.1]
• bufbuild/buf-lint-action v1
• bufbuild/buf-breaking-action v1

.github/workflows/buf.yml (5)

• actions/checkout v3 → [Updates: v6, v3]
• bufbuild/buf-setup-action v1.13.1 → [Updates: v1.50.0, v1.13.1]
• bufbuild/buf-lint-action v1
• bufbuild/buf-breaking-action v1
• bufbuild/buf-push-action v1

.github/workflows/ci.yml (29)

• actions/checkout v3 → [Updates: v6, v3]
• prometheus/promci v0.0.2 → [Updates: v0.5.3, v0.0.2]
• actions/checkout v3 → [Updates: v6, v3]
• prometheus/promci v0.0.2 → [Updates: v0.5.3, v0.0.2]
• actions/checkout v3 → [Updates: v6, v3]
• actions/setup-go v3 → [Updates: v6, v3]
• actions/checkout v3 → [Updates: v6, v3]
• actions/checkout v3 → [Updates: v6, v3]
• actions/checkout v3 → [Updates: v6, v3]
• prometheus/promci v0.0.2 → [Updates: v0.5.3, v0.0.2]
• actions/checkout v3 → [Updates: v6, v3]
• prometheus/promci v0.0.2 → [Updates: v0.5.3, v0.0.2]
• actions/checkout v3 → [Updates: v6, v3]
• actions/setup-go v3 → [Updates: v6, v3]
• golangci/golangci-lint-action v3.4.0 → [Updates: v3.7.1, v9.2.0, v3.4.0]
• actions/checkout v3 → [Updates: v6, v3]
• prometheus/promci v0.0.2 → [Updates: v0.5.3, v0.0.2]
• actions/checkout v3 → [Updates: v6, v3]
• prometheus/promci v0.0.2 → [Updates: v0.5.3, v0.0.2]
• actions/checkout v3 → [Updates: v6, v3]
• prometheus/promci v0.0.2 → [Updates: v0.5.3, v0.0.2]
• actions/setup-node v3 → [Updates: v6, v3]
• actions/cache v3.2.4 → [Updates: v3.5.0, v5.0.1, v3.2.4]
• quay.io/prometheus/golang-builder 1.23-base → [Updates: 1.25-base, 1.23-base]
• quay.io/prometheus/golang-builder 1.23-base → [Updates: 1.25-base, 1.23-base]
• go >=1.19 <1.20
• quay.io/prometheus/golang-builder 1.22-base → [Updates: 1.25-base, 1.22-base]
• quay.io/prometheus/golang-builder 1.23-base → [Updates: 1.25-base, 1.23-base]
• go 1.20.x

.github/workflows/codeql-analysis.yml (6)

• actions/checkout v3 → [Updates: v6, v3]
• actions/setup-go v3 → [Updates: v6, v3]
• github/codeql-action v2 → [Updates: v4, v2]
• github/codeql-action v2 → [Updates: v4, v2]
• github/codeql-action v2 → [Updates: v4, v2]
• go >=1.22 <=1.23

.github/workflows/funcbench.yml (2)

• prominfra/funcbench master → [Updates: master]
• prominfra/funcbench master → [Updates: master]

.github/workflows/fuzzing.yml (3)

• google/oss-fuzz master
• google/oss-fuzz master
• actions/upload-artifact v3 → [Updates: v6, v3]

.github/workflows/lock.yml (1)

• dessant/lock-threads v4 → [Updates: v6, v4]

.github/workflows/prombench.yml (3)

• prominfra/prombench master → [Updates: master]
• prominfra/prombench master → [Updates: master]
• prominfra/prombench master → [Updates: master]

.github/workflows/repo_sync.yml (2)

• actions/checkout v3 → [Updates: v6, v3]
• quay.io/prometheus/golang-builder unknown version → [Updates: undefined]

gomod (2)

documentation/examples/remote_storage/go.mod (14)

• go 1.18
• github.com/go-kit/log v0.2.1
• github.com/gogo/protobuf v1.3.2
• github.com/golang/snappy v0.0.4 → [Updates: v1.0.0]
• github.com/influxdata/influxdb v1.11.0 → [Updates: v1.12.2, v2.8.0]
• github.com/prometheus/client_golang v1.14.0 → [Updates: v1.23.2]
• github.com/prometheus/common v0.37.0 → [Updates: v0.67.4]
• github.com/stretchr/testify v1.8.1 → [Updates: v1.11.1]
• gopkg.in/alecthomas/kingpin.v2 v2.2.6 → [Updates: v2.4.0]
• github.com/docker/distribution v2.8.1+incompatible → [Updates: v2.8.2+incompatible]
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.34.0 → [Updates: v0.44.0]
• golang.org/x/text v0.3.7 → [Updates: v0.3.8]
• google.golang.org/protobuf v1.28.1 → [Updates: v1.33.0]
• github.com/prometheus/prometheus v0.37.1-0.20221011120840-430bdc9dd099@430bdc9dd099 → [Updates: v0.308.1]

go.mod (90)

• go 1.23
• github.com/Azure/azure-sdk-for-go v65.0.0+incompatible → [Updates: v68.0.0+incompatible]
• github.com/Azure/go-autorest/autorest v0.11.28 → [Updates: v0.11.30]
• github.com/Azure/go-autorest/autorest/adal v0.9.22 → [Updates: v0.9.24]
• github.com/alecthomas/kingpin/v2 v2.3.1 → [Updates: v2.4.0]
• github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137@b94a6e3cc137 → [Updates: v0.0.0-20240927000941-0f3dac36c52b]
• github.com/apache/arrow/go/v10 v10.0.1 → [Updates: v17.0.0]
• github.com/apache/arrow/go/v8 v8.0.0-20220414050214-b61fb727fcc9@b61fb727fcc9
• github.com/aws/aws-sdk-go v1.44.207 → [Updates: v1.55.8]
• github.com/cespare/xxhash/v2 v2.2.0 → [Updates: v2.3.0]
• github.com/dennwc/varint v1.0.0
• github.com/digitalocean/godo v1.95.0 → [Updates: v1.171.0]
• github.com/docker/docker v20.10.23+incompatible → [Updates: v25.0.13+incompatible]
• github.com/edsrzf/mmap-go v1.1.0 → [Updates: v1.2.0]
• github.com/envoyproxy/go-control-plane v0.10.3 → [Updates: v0.14.0]
• github.com/envoyproxy/protoc-gen-validate v0.9.1 → [Updates: v0.10.1, v1.3.0]
• github.com/fsnotify/fsnotify v1.6.0 → [Updates: v1.9.0]
• github.com/go-kit/log v0.2.1
• github.com/go-logfmt/logfmt v0.6.0 → [Updates: v0.6.1]
• github.com/go-openapi/strfmt v0.21.3 → [Updates: v0.25.0]
• github.com/go-zookeeper/zk v1.0.3 → [Updates: v1.0.4]
• github.com/gogo/protobuf v1.3.2
• github.com/golang/snappy v0.0.4 → [Updates: v1.0.0]
• github.com/google/pprof v0.0.0-20230111200839-76d1ae5aea2b@76d1ae5aea2b → [Updates: v0.0.0-20251213031049-b05bdaca462f]
• github.com/gophercloud/gophercloud v1.1.1 → [Updates: v1.14.1, v2.9.0]
• github.com/grafana/regexp v0.0.0-20221122212121-6b5c0a4cb7fd@6b5c0a4cb7fd → [Updates: v0.0.0-20221122212121-6b5c0a4cb7fd]
• github.com/grpc-ecosystem/grpc-gateway v1.16.0 → [Updates: v2.27.3]
• github.com/hashicorp/consul/api v1.18.0 → [Updates: v1.33.0]
• github.com/hashicorp/nomad/api v0.0.0-20230124213148-69fd1a0e4bf7@69fd1a0e4bf7 → [Updates: v0.0.0-20251222083347-1355d4cb1671]
• github.com/hetznercloud/hcloud-go v1.39.0 → [Updates: v1.59.2, v2.33.0]
• github.com/ionos-cloud/sdk-go/v6 v6.1.3 → [Updates: v6.3.5]
• github.com/json-iterator/go v1.1.12
• github.com/kolo/xmlrpc v0.0.0-20220921171641-a4b6fa1dd06b@a4b6fa1dd06b
• github.com/linode/linodego v1.12.0 → [Updates: v1.63.0]
• github.com/miekg/dns v1.1.50 → [Updates: v1.1.69]
• github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f@2f068394615f
• github.com/oklog/run v1.1.0 → [Updates: v1.2.0]
• github.com/oklog/ulid v1.3.1 → [Updates: v2.1.1]
• github.com/ovh/go-ovh v1.3.0 → [Updates: v1.9.0]
• github.com/pkg/errors v0.9.1
• github.com/polarsignals/frostdb v0.0.0-20230306134514-bb0c4c0b1400@bb0c4c0b1400 → [Updates: v0.0.0-20250728125857-906ebbaef267]
• github.com/prometheus/alertmanager v0.25.0 → [Updates: v0.25.1]
• github.com/prometheus/client_golang v1.14.0 → [Updates: v1.23.2]
• github.com/prometheus/client_model v0.3.0 → [Updates: v0.6.2]
• github.com/prometheus/common v0.41.0 → [Updates: v0.67.4]
• github.com/prometheus/common/assets v0.2.0
• github.com/prometheus/common/sigv4 v0.1.0
• github.com/prometheus/exporter-toolkit v0.8.2 → [Updates: v0.15.0]
• github.com/scaleway/scaleway-sdk-go v1.0.0-beta.12 → [Updates: v1.0.0-beta.36]
• github.com/shurcooL/httpfs v0.0.0-20190707220628-8d4bc4ba7749@8d4bc4ba7749 → [Updates: v0.0.0-20230704072500-f1e31cf0ba5c]
• github.com/stretchr/testify v1.8.2 → [Updates: v1.11.1]
• github.com/thanos-io/objstore v0.0.0-20230303144913-af9531b2a2b7@af9531b2a2b7 → [Updates: v0.0.0-20250813080715-4e5fd4289b50]
• github.com/vultr/govultr/v2 v2.17.2 → [Updates: v3.26.1]
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.37.0 → [Updates: v0.44.0]
• go.opentelemetry.io/otel v1.14.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.11.2 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.11.2 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.11.2 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/sdk v1.11.2 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/trace v1.14.0 → [Updates: v1.39.0]
• go.uber.org/atomic v1.10.0 → [Updates: v1.11.0]
• go.uber.org/automaxprocs v1.5.1 → [Updates: v1.6.0]
• go.uber.org/goleak v1.2.0 → [Updates: v1.3.0]
• golang.org/x/exp v0.0.0-20230304125523-9ff063c70017@9ff063c70017 → [Updates: v0.0.0-20251219203646-944ab1f22d93]
• golang.org/x/net v0.7.0 → [Updates: v0.38.0]
• golang.org/x/oauth2 v0.5.0 → [Updates: v0.27.0]
• golang.org/x/sync v0.1.0 → [Updates: v0.19.0]
• golang.org/x/sys v0.6.0 → [Updates: v0.39.0]
• golang.org/x/time v0.3.0 → [Updates: v0.14.0]
• golang.org/x/tools v0.6.0 → [Updates: v0.40.0]
• google.golang.org/api v0.108.0 → [Updates: v0.258.0]
• google.golang.org/genproto v0.0.0-20230124163310-31e0e69b6fc2@31e0e69b6fc2 → [Updates: v0.0.0-20251222181119-0a764e51fe1b]
• google.golang.org/grpc v1.52.1 → [Updates: v1.56.3]
• google.golang.org/protobuf v1.28.1 → [Updates: v1.33.0]
• gopkg.in/alecthomas/kingpin.v2 v2.2.6 → [Updates: v2.4.0]
• gopkg.in/yaml.v2 v2.4.0 → [Updates: v3.0.1]
• gopkg.in/yaml.v3 v3.0.1
• k8s.io/api v0.26.1 → [Updates: v0.35.0]
• k8s.io/apimachinery v0.26.1 → [Updates: v0.35.0]
• k8s.io/client-go v0.26.1 → [Updates: v0.35.0]
• k8s.io/klog v1.0.0 → [Updates: v2.130.1]
• k8s.io/klog/v2 v2.80.1 → [Updates: v2.130.1]
• github.com/docker/distribution v2.8.1+incompatible → [Updates: v2.8.2+incompatible]
• github.com/golang-jwt/jwt/v4 v4.4.3 → [Updates: v4.5.2]
• github.com/golang/glog v1.0.0 → [Updates: v1.2.4]
• github.com/hashicorp/go-retryablehttp v0.7.1 → [Updates: v0.7.7]
• github.com/sirupsen/logrus v1.9.0 → [Updates: v1.9.1]
• golang.org/x/crypto v0.3.0 → [Updates: v0.45.0]
• github.com/simonpasquier/klog-gokit v0.3.0 → [Updates: v3.5.0]
• github.com/simonpasquier/klog-gokit/v3 v3.0.0 → [Updates: v3.5.0]

jsonnet-bundler (1)

documentation/prometheus-mixin/jsonnetfile.json (2)

• github.com/grafana/grafonnet-lib/grafonnet master → [Updates: master]
• github.com/grafana/jsonnet-libs/grafana-builder master → [Updates: master]

npm (4)

web/ui/module/codemirror-promql/package.json (19)

• lru-cache ^6.0.0 → [Updates: ^11.0.0]
• @codemirror/autocomplete ^6.4.0 → [Updates: 6.20.0]
• @codemirror/language ^6.4.0 → [Updates: 6.12.1]
• @codemirror/lint ^6.1.0 → [Updates: 6.9.2]
• @codemirror/state ^6.2.0 → [Updates: 6.5.3]
• @codemirror/view ^6.7.3 → [Updates: 6.39.7]
• @lezer/common ^1.0.2 → [Updates: 1.5.0]
• @lezer/lr ^1.3.1 → [Updates: 1.4.5]
• @lezer/highlight ^1.1.3 → [Updates: 1.2.3]
• @types/lru-cache ^5.1.1 → [Updates: 5.1.1, ^7.0.0]
• isomorphic-fetch ^3.0.0 → [Updates: 3.0.0]
• nock ^13.3.0 → [Updates: 13.5.6, ^14.0.0]
• @codemirror/autocomplete ^6.4.0
• @codemirror/language ^6.3.0
• @codemirror/lint ^6.0.0
• @codemirror/state ^6.1.1
• @codemirror/view ^6.4.0
• @lezer/common ^1.0.1
• node >=12.0.0

web/ui/module/lezer-promql/package.json (5)

• @lezer/generator ^1.2.2 → [Updates: 1.8.0]
• @lezer/lr ^1.3.1 → [Updates: 1.4.5]
• @lezer/highlight ^1.1.3 → [Updates: 1.2.3]
• @lezer/lr ^1.2.3
• @lezer/highlight ^1.1.2

web/ui/package.json (12)

• @types/jest ^29.4.0 → [Updates: 29.4.0, ^30.0.0]
• @types/node ^17.0.45 → [Updates: 17.0.45, ^24.0.0]
• eslint-config-prettier ^8.6.0 → [Updates: 8.6.0, ^10.0.0]
• eslint-config-react-app ^7.0.1 → [Updates: 7.0.1]
• eslint-plugin-prettier ^4.2.1 → [Updates: 4.2.1, ^5.0.0]
• jest-canvas-mock ^2.4.0 → [Updates: 2.4.0]
• jest-fetch-mock ^3.0.3 → [Updates: 3.0.3]
• react-scripts ^5.0.1 → [Updates: 5.0.1]
• prettier ^2.8.3 → [Updates: 2.8.3, ^3.0.0]
• ts-jest ^29.0.5 → [Updates: 29.0.5]
• typescript ^4.9.4 → [Updates: 4.9.4, ^5.0.0]
• npm >=7.0.0

web/ui/react-app/package.json (53)

• @codemirror/autocomplete ^6.4.0
• @codemirror/commands ^6.2.0
• @codemirror/language ^6.4.0
• @codemirror/lint ^6.1.0
• @codemirror/search ^6.2.3
• @codemirror/state ^6.2.0
• @codemirror/view ^6.7.3
• @forevolve/bootstrap-dark ^2.1.1 → [Updates: ^4.0.0]
• @fortawesome/fontawesome-svg-core 6.2.1 → [Updates: 6.7.2, 7.1.0]
• @fortawesome/free-solid-svg-icons 6.2.1 → [Updates: 6.7.2, 7.1.0]
• @fortawesome/react-fontawesome 0.2.0 → [Updates: 0.2.6, 3.1.1]
• @lezer/lr ^1.3.1
• @lezer/highlight ^1.1.3
• @lezer/common ^1.0.2
• @nexucis/fuzzy ^0.4.1 → [Updates: ^0.5.0]
• @nexucis/kvsearch ^0.8.1 → [Updates: ^0.9.0]
• bootstrap ^4.6.2 → [Updates: ^5.0.0]
• css.escape ^1.5.1
• downshift ^7.2.0 → [Updates: ^9.0.0]
• http-proxy-middleware ^2.0.6 → [Updates: ^3.0.0]
• jquery ^3.6.3
• jquery.flot.tooltip ^0.9.0
• moment ^2.29.4
• moment-timezone ^0.5.40 → [Updates: ^0.6.0]
• popper.js ^1.14.3
• react ^17.0.2 → [Updates: ^19.0.0]
• react-copy-to-clipboard ^5.1.0
• react-dom ^17.0.2 → [Updates: ^19.0.0]
• react-infinite-scroll-component ^6.1.0
• react-resize-detector ^7.1.2 → [Updates: ^12.0.0]
• react-router-dom ^5.3.4 → [Updates: ^7.0.0]
• react-test-renderer ^17.0.2 → [Updates: ^19.0.0]
• reactstrap ^8.10.1 → [Updates: ^9.0.0]
• sanitize-html ^2.8.1
• sass 1.57.1 → [Updates: 1.97.1]
• tempusdominus-bootstrap-4 ^5.39.2
• tempusdominus-core ^5.19.3
• @testing-library/react-hooks ^7.0.2 → [Updates: 7.0.2, ^8.0.0]
• @types/enzyme ^3.10.12 → [Updates: 3.10.19]
• @types/flot 0.0.32 → [Updates: 0.0.36]
• @types/jquery ^3.5.16 → [Updates: 3.5.33]
• @types/react ^17.0.53 → [Updates: 17.0.90, ^19.0.0]
• @types/react-copy-to-clipboard ^5.0.4 → [Updates: 5.0.7]
• @types/react-dom ^17.0.18 → [Updates: 17.0.26, ^19.0.0]
• @types/react-router-dom ^5.3.3 → [Updates: 5.3.3]
• @types/sanitize-html ^2.8.0 → [Updates: 2.16.0]
• @types/sinon ^10.0.13 → [Updates: 10.0.20, ^21.0.0]
• @wojtekmaj/enzyme-adapter-react-17 ^0.8.0 → [Updates: 0.8.0]
• enzyme ^3.11.0 → [Updates: 3.11.0]
• enzyme-to-json ^3.6.2 → [Updates: 3.6.2]
• mutationobserver-shim ^0.3.7 → [Updates: 0.3.7]
• sinon ^14.0.2 → [Updates: 14.0.2, ^21.0.0]
• fsevents ^2.3.2

nvm (1)

web/ui/.nvmrc (1)

• node v16.14.2 → [Updates: 16.20.2, 24.12.0]

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.